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(U//FOUO) Continued Extortion Scheme and Telephony Denial of Service (TDoS) 
Attacks on Medcal and Healthcare Institutions. 


SOURCE A: (U//FOUO) A call-in to this agency. 
SOURCE B: (U//FOUO) A call-in to this agency. 


(U//FOUO) FBI San Francisco is releasing this Situation Information Report (SIR) to raise law 
enforcement agencies awareness of recent Telephony Denial of Service (TDoS) attacks on Medical and 
Healthcare institutions. 


(U//FOUO) Since April 2013 and continuing through March 2014, at least three Medical/Healthcare 
institutions in the greater San Francisco metropolitan area have been the victim of TDoS attacks that 
have disrupted telephonic communications. In one instance, the attacker used a computer to redial the 
hospital's Emergency Room (ER) continuously thereby crashing the hospital's telephone network. The 
ER phone lines could not receive any emergency calls. 


(U//FOUO) At least 1000 similar complaints have been received by the FBI's Internet Complaint 
Center (www.ic3.gov) since 2013, including many from medical centers across the country. All of the 
complaints included an unidentified individual(s), speaking with a foreign accent, calling in regards to 


(U) Warning: This is an information report, not finally evaluated intelligence. It is being shared for 
informational purposes but has not been fully evaluated, integrated with other information, interpreted 
or analyzed. Receiving agencies are requested not to take action based on this raw reporting without prior 


coordination with the FBI. 


(U) Note: This product reflects the views of the San Francisco Division and has not been vetted by FBI 
Headquarters. 
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debt collection and threats of TDoS attacks if he was not given the information he was requesting. At 
times, the individual(s) carried out TDoS attacks on the actual emergency dispatch centers, which were 
unable to receive phone calls. Most of the phone calls appeared to be from spoofed phone numbers 
belonging to other US businesses from across the country. 


(U//FOUO) FBI San Francisco encouraged victims to file a report with their local police department or 
sheriff's office. Law Enforcement agencies can assist by coordinating with the FBI, FCC, FTC, DHS 
NCC-NCCIC. 


(U) This report has been prepared by the San Francisco Division of the FBI. Comments and queries may be 
addressed to the San Francisco Field Intelligence Group at 415-553-7400. 
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Distribution 


Cyber Briefers 

FBI Intranet 

LEO San Francisco SIG 

Northern California Regional Intelligence Center 
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FBI Customer Satisfaction Survey 


Please take a moment to complete this survey and help evaluate the quality, value, and relevance of our 
product. Your response will help us serve you more effectively and efficiently in the future. Thank you for your 
cooperation and assistance. Please return to: 

Federal Bureau of Investigation 


San Francisco Division 
450 Golden Gate Ave. 
San Francisco, CA 94102 
Fax: (415) 553-7674 





Customer and Product Information 

SIR Tracking ID: SIR-00000011140 

Product Title: Continued Extortion Scheme and Telephony Denial of Service (TDoS) Attacks on 
Medcal and Healthcare Institutions. 

Dated: 

Customer Agency: 








Relevance to Your Intelligence Needs 

1. The product increased my knowledge of an issue or topic. (Check one) 
5. Strongly Agree 

4. Somewhat Agree 

3. Neither Agree or Disagree 

2. Somewhat Disagree 

l. Strongly Disagree 


Actionable Value 

2. The product helped me decide on a course of action. (Check one) 
— 5. Strongly Agree 

4. Somewhat Agree 

3. Neither Agree or Disagree 

2. Somewhat Disagree 

1. Strongly Disagree 


Timeliness Value 

3. The product was timely to my needs. (Check one) 
5. Strongly Agree 

4. Somewhat Agree 

3. Neither Agree or Disagree 

2. Somewhat Disagree 

1. Strongly Disagree 


Comments (please use reverse or attach separate page if needed): 
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